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(54) Method of and apparatus for transmitting data in a distributed processor system 



(57) A transmission scheme jn a loosely synchro- 
nised distributed data processing system having a plu- 
rality of nodes is provided in which each message is giv- 



en a priority based on its scheduled transmission time 
in the transmission cycle. Thus, if a message is delayed, 
it has priority over all subsequently scheduled messag- 
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Description 

[0001] The present invention relates to a method of 
and an apparatus for transmitting data within a distrib- 
uted data processing system. 

[0002] It is known to provide control systems for con- 
trolling complex items of equipment. GB 2337347 dis- 
closes a distributed data processing system for control- 
ling an aircraft engine. The processing system compris- 
es a plurality of independent processing units intercon- 
nected via a data bus. Thus, each processing unit can 
receive data and perform computations locally based on 
that data. Each unit may also be able to control an as- 
sociated device. However, in order that the system can 
function as a whole, each unit must also be able to ex- 
change data with other units forming part of the control 
system. 

[0003] In the system described in GB 2337347, an air- 
craft engine control system is disclosed which compris- 
es three units. A first unit, such as a fan-case unit, in- 
cludes various transducers which sense engine operat- 
ing input variables, such as air pressure, air tempera- 
ture, and so on, and also receives input from cockpit 
transducers such that the pilot's demands of the engine 
can be ascertained. A second unit, known as a core unit, 
receives data such as rotational speed of the engine tur- 
bine, internal airpressures, temperatures, pump speeds 
and so on. This unit typically processes this data, in 
combination with data supplied from the fan case unit, 
in order to generate a measure of fuel demand. A third 
unit, which is a fuel control unit, is associated with the 
fuel flow valves and fuel pressure transducers and pro- 
vides a fast response closed loop control of fuel flow in 
the engine in order to obtain the fuel flow demanded by 
the core unit. 

[0004] The units are independent, and as such have 
independent clock generators and are linked together 
by a serial bus which enables them to share data. 
[0005] Although the units are independent, they must 
act in a defined way with respect to one another in order 
to control the engine. It is therefore desirable that the 
units are loosely synchronised with one another and that 
the transmission of data from one unit to another occurs 
in an orderly manner without undue delay. It would be 
possible to achieve this by either having the data trans- 
mission co-ordinated by one of the units, for example 
the core unit, such that each device was polled in turn, 
or by enabling each module to transmit data as and 
when it wished to, and the other modules to be interrupt- 
ed once data was received in their receive buffers. How- 
ever, either of these approaches would require the use 
of interrupts which is undesirable in any safety critical 
application as the system may then operate in a non- 
deterministic manner as it would not be possible to pre- 
dict the order in which control events occurred. In order 
to overcome this, GB 2337347 discloses the use of syn- 
chronising pulses such that each unit periodically re- 
ceives a reference enabling it to set its own internal 



counter. Each unit may then also keep a measure of how 
well synchronised it remains with the rest of the system. 
If a unit determines that it is lagging the timing master 
unit by more than a predetermined time period, then it 

s can commence a new timing cycle immediately it re- 
ceives a synchronisation pulse. If a unit determines that 
it is leading the master unit by more than a predeter- 
mined time interval, then it can restart its operating cycle 
once it receives the synchronisation pulse. However, if 

10 a unit determines that it has lost near synchronisation 
with the rest of the system, it may enter a revised oper- 
ating mode, where it may, for example, suspend 
processing during its current processing cycle and pre- 
pare itself for re-synchronisation to the master clock. 

15 [0006] Whilst the units are synchronised, they are still 
required to exchange data in an orderly manner. The 
data channel has only a limited bandwidth and hence 
the data flow needs to be controlled throughout the op- 
erating cycle of the distributed data processing system. 

20 Thus, the cycle can be subdivided into a number of time 
windows with various items of data scheduled for trans- 
mission in each specific one of the windows. However, 
because the data processors are only loosely synchro- 
nised, it is still necessary to provide a mechanism for 

25 resolving contentions on the data link. This has hitherto 
been done by assigning a priority identifier to each item 
of data to be transmitted with those items which are re- 
garded as more important being given a higher priority. 
Thus, in the event of contention between two units wish- 

30 ing to transmit concurrently, a bus arbiter examines the 
priority assigned to each item of data and selects the 
most important for transmission first. 
[0007] According to a first aspect of the present inven- 
tion, there is provided a method of transmitting data 

35 within a distributed data processing system having a 
plurality of nodes interconnected via a data channel, 
wherein the data processing system has a data trans- 
mission cycle subdivided into a plurality of transmission 
periods, each period able to support the transmission of 

40 a plurality of data transmission events, and each node 
is allocated at least one data transmission event in at 
least one of the transmission periods, and a priority is 
associated with each transmission event, the priority be- 
ing determined by the scheduled transmission time of 

45 the transmission event. 

[0008] It is thus possible to provide a method of trans- 
mitting data between nodes of a distributed system 
wherein the message transmission is deterministic in 
that it can be guaranteed that a message will be re- 

50 ceived within a predetermined time period from its 
scheduled transmission period. 
[0009] The move to prioritising the message by its 
nominal transmission time rather than by its content is 
significant. It would intuitively be expected that priorities 

55 should be accorded on the basis of the information con- 
tained in the message. 

[0010] However, this does not necessarily work well 
in distributed data processing systems where the nodes 
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are only approximately synchronised. 
[0011] Consider the example of an aircraft engine 
management system where a plurality of measure- 
ments are to be made and transmitted to other nodes, 
and where the measurements are analysed and com- 
mands issued to control the engine. In such a safety crit- 
ical environment these actions need to be predictable 
and to be performed on a cyclical basis. The cycle typ- 
ically has a 1 0ms repeat time and is subdivided into 1 0 
transmission periods, each of 1mS duration. 
[0012] Each node is free running but is approximately 
synchronised with the other nodes. However, the fact 
that the internal clocks can drift a little means that, for 
example, messages that were scheduled for transmis- 
sion in the third transmission period as measured at one 
node may be transmitted in a fourth transmission period 
as measured at another node. However, here they may 
now come into conflict with the messages scheduled for 
transmission in the fourth period. Since the data channel 
can only transmit a predetermined number of messag- 
es, this may mean that some of the messages sched- 
uled for transmission in the third or fourth periods may 
not be able to transmit in that period. Thus these mes- 
sages may be held back to a subsequent transmission 
period, having a knock on effect within the data system. 
[0013] As noted above, the messages in this prior art 
system have a priority associated with them which is de- 
termined by the message content. Thus the message in 
this example which was scheduled for the third trans- 
mission period but which has slipped to the fourth period 
may now be in conflict with messages from the fourth 
transmission period which have a higher priority. Thus 
the delayed message may not have sufficient priority to 
transmit in the fourth message period and may be held 
over to the fifth transmission period. Here it again has 
to contend with messages scheduled for the fifth trans- 
mission period so there is the possibility that the delayed 
message may be further delayed or may cause another 
message to be delayed. 

[0014] Although it is possible to work out the maxi- 
mum delay that a message may experience in such a 
system, the calculation can be complex. Furthermore if 
there are constraints on the maximum delay that can be 
accepted for a given message, the assignment of mes- 
sage priorities to ensure that it arrives whilst not exceed- 
ing the maximum delay for other messages is a complex 
task. 

[0015] The present invention moves away from the in- 
tuitive method of assigning transmission priority based 
on message content but instead assigns priority by po- 
sition in the transmission schedule. This means that a 
delayed message will take priority over all subsequently 
scheduled messages. However, the maximum delay 
that a message may experience is now much reduced. 
[0016] Preferably the distributed data processor sys- 
tem is arranged such that transmissions over the data 
channel are not controlled by a master, node. Thus rath- 
er than waiting to be polled by a master or being passed 



a control token, each node can attempt transmitting its 
message when the scheduled transmission time for that 
message, as determined by the node, arrives. 
[0017] Advantageously one of the nodes is arranged 
5 to generate a synchronisation signal which is sent to 
each other node such that each node receiving the syn- 
chronisation signal may adjust its internal clock to main- 
tain synchronisation. 

[001 8] Preferably the schedule of data transmissions 
w is selected such that there is excess capacity for mes- 
sage transmission towards the end of the data transmis- 
sion cycle. 

[0019] This enables any delayed message to be 
transmitted before a new cycle commences. 
is [0020] Preferably the messages transmitted towards 
the end of the transmission cycle are of lower impor- 
tance than messages transmitted earlier in the cycle 
and/or relate to instructions, data or measurement that 
change relatively slowly. Thus, if the data system's op- 
20 eration becomes sufficiently perturbed such that it is un- 
able to complete all of the scheduled message trans- 
missions within a transmission cycle, then the messag- 
es which fail to transmit are only of low importance and 
the data processors that were waiting for those messag- 
es es can temporarily use the most recent historical values 
or a default value, which ever is most appropriate of the 
data that would have been contained in the missing 
messages until such time as the data processing system 
re-establishes normal operation. 
30 [0021] Preferably each node has a communications 
interface with the data channel such that simultaneous 
attempts to transmit data from different nodes will be re- 
solved rapidly by arbitration between the communica- 
tions interfaces. 
35 [0022] Preferably each data transmission event (ie 
each message or instruction sent) has a unique priority 
identifier. Thus there can never be simultaneous re- 
quests to the bus for message transmission of the same 
priority. 

40 [0023] Preferably message priorities are assigned 
such that no two messages have priorities which differ 
by an exact power of 2. This means that corruption of a 
single bit within the priority will result in an invalid priority 
identifier. This prevents the erroneous acceptance of a 

^5 different message if such a corruption occurs. 

[0024] According to a second aspect of the present 
invention there is provided a method of transmitting data 
within a distributed data processing system having a 
plurality of nodes connected via a data pathway wherein 

50 the nodes are substantially synchronised to a reference 
and at least one node attempts to transmit a predeter- 
mined item of data at a scheduled transmission time, as 
measured locally within a node, following the reference, 
and wherein each item of data is associated with a 

55 unique priority identifier, with the priority identifier indi- 
cating that the priority of a message reduces as the 
scheduled transmission time of a message increases, 
and wherein nodes expecting to receive a message 
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check for its receipt within a receipt window following 
the scheduled transmission of the message. 
[0025] According to a third aspect of the present in- 
vention, there is provided a distributed data processing 
system having a plurality of nodes interconnected via a 
data channel, wherein the data processing system has 
a data transmission cycle subdivided into a plurality of 
transmission periods, each period able to support the 
transmission of a plurality of data transmission events, 
and at least one node is allocated at least one data 
transmission event in at least one of the transmission 
periods, and a priority is associated with each transmis- 
sion event, the priority being determined by the sched- 
uled transmission time of the transmission event. 
[0026] According to a fourth aspect of the present in- 
vention, there is provided a distributed data processing 
system having a plurality of nodes connected via a data 
pathway, wherein the nodes are substantially synchro- 
nised to a reference and at least one node attempts to 
transmit a predetermined item of data at a scheduled 
transmission time as measured locally within a node fol- 
lowing the reference; and wherein each item of data is 
associated with a unique priority identifier, with the pri- 
ority identifier indicating that the priority of a message 
reduces as the scheduled transmission time of a mes- 
sage increases, and wherein nodes expecting to receive 
a message check for its receipt within a receipt window 
following the scheduled transmission of the message. 
[0027] The present invention will further be described, 
by way of example, with reference to the accompanying 
drawings, in which: 

Figure 1 schematically illustrates a distributed data 
processing system forming part of an aircraft engine 
control system; 

Figure 2 schematically illustrates a prior art mes- 
sage priority system; 

Figure 3 schematically illustrates a message priority 
system constituting an embodiment of the present 
invention; and 

Figure 4 schematically illustrates the relation be- 
tween data type and priority identifier within a dis- 
tributed data processing system constituting an em- 
bodiment of the present invention. 

[0028] Figure 1 schematically illustrates a distributed 
data processing system for controlling an aircraft en- 
gine. The processing system comprises a fan case unit 
1, a core unit 2 and a fuel control unit 3. The internal 
construction of each unit is conceptionally similar, and 
consequently only the construction of the fan case unit 
1 will be described in detail. The unit 1 comprises a CPU 
10 which interfaces with an associated memory 12 
which serves to hold program code and intermediate 
variables. The CPU 10 is driven from an associated 



6 

clock 1 4 and in turn uses this to generate a periodic tim- 
ing signal every one or two milliseconds which is sent 
to and counted by a tick counter 1 6. The number of ticks 
counted by the tick counter 1 6 can be examined by the 
5 CPU to determine the time elapsed since the last syn- 
chronisation signal, and it can also be examined when 
the next synchronisation signal arrives to determine how 
far out of synchronisation the unit has become to the 
timing master unit. The CPU also exchanges data with 
a controller area network (CAN) interface 18 which is 
connected to a data bus 20. 

[0029] Similar components are found in the core unit 
and fuel control unit, and are designated with the same 
reference numeral prefixed by "2-" for the core unit and 
"3-" for the fuel control unit. 

[0030] The fan case unit receives inputs from engine 
and cockpit transducers and processes these to provide 
measurements of power demand and engine perform- 
ance to the core unit 2. The core unit 2 also receives 
inputs from engine transducers and processes these to- 
gether with the information received from the fan case 
unit in order to derive a fuel demand value. This infor- 
mation is passed to the fuel control unit 3 which receives 
data from fuel system pressure and flow rate sensors 
and position transducers on a fuel control valve in order 
to derive a drive signal to the fuel control valve. The fuel 
control unit provides a local control loop but neverthe- 
less may be arranged to pass data concerning its per- 
formance back to the core unit 2. 
[0031] The synchronisation's scheme for maintaining 
the units in approximate synchronisation has been dis- 
closed in GB 2337347A and consequently does not 
need to be described further here. 
[0032] There are a number of messages which need 
to be transmitted from unit to unit within the distributed 
control system. Figure 2 schematically illustrates a tim- 
ing regime for achieving this. The data processing sys- 
tem has a control cycle time which, for example, may 
be approximately 10 milliseconds long. The cycle time 
is subdivided into ten 1 millisecond time slots, indicated 
as time frames TO to time frames T9 in Figure 2. As in- 
dicated, in each time frame several messages may be 
transmitted, with messages possibly being transmitted 
by more than one node. Each message has in the prior 
art been associated with a priority which is determined 
by the importance placed on that parameter by the sys- 
tem designer. The lower the message identifier number, 
then the more important the message is. Thus, in Figure 
2, messages having identifiers 0, 1 32, 1 36, 1 64, 1 68 and 
172 are scheduled for transmission in time frame TO 
spanning the first 1 millisecond of the operating cycle. 
It should be noted that some messages are transmitted 
more than once in a complete operating cycle and, for 
example, the message having priority 132 is transmitted 
again in frame number T5. 

[0033] Given that only one message can be transmit- 
ted on the bus 20 at a time, the messages in time frame 
TO are transmitted sequentially. If all the messages orig- 
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inate from one node, then the node merely stacks them 
In priority sequence and then transmits them. However, 
if the messages originate from more than one node 
there is a risk that the nodes may seek to transmit their 
data simultaneously. If this occurs, the CAN interfaces 
of the nodes perform bus arbitration in order to ensure 
that only one unit seeks to transmit at any given time 
and that priority is accorded to the message having the 
lowest message identifier number. 
[0034] As noted hereinbefore, the units 1 , 2 and 3 are 
not rigidly synchronised. Thus, if the unit attempting to 
transmit the message having identifier 1 72 in time frame 
TO lags behind some of the other units, there is a pos- 
sibility that the unit trying to transmit message 1 40 in the 
first time frame T1 will come into conflict with the unit 
trying to transmit message 1 72 in the zero-ith time frame 
TO because the time frames partially overlap from one 
unit to another. If this occurs, then the CAN interfaces 
will arbitrate between the transmission requests and 
give message 140 priority over message 172. It is also 
therefore likely that messages 1 44 and 1 48 will take pri- 
ority over message 1 72. This causes the message 1 72 
to become delayed. The situation could become even 
worse considering time frame T2 if for example messag- 
es 232 or 236 were to come into timing contention with 
message 28 sent from a different node in time frame 3 
as a result of the time frames at different nodes being 
slightly out of temporal alignment. AH of the messages 
identified in time frame 3, time frame 4 and time frame 

5 have a greater priority than the last message of time 
frame 2. Thus, it is possible that the message could be- 
come significantly delayed, possibly as far as time frame 

6 if there were many nodes on the system and the nodes 
were sufficiently out of synchronisation. Thus, although 
the scheme is deterministic in that its performance can 
be calculated and consequently the worst case latency 
between a message being submitted for transmission 
and actually being transmitted can be calculated, the re- 
al time performance of the system may nevertheless 
vary significantly in operation. 

[0035] Figure 3 schematically illustrates a revised 
transmission scheme constituting an embodiment of the 
present invention. Again, the cycle time in this example 
is divided into ten frames labelled frame TO to frame T9. 
Furthermore, the same messages are to be transmitted 
in the example shown in Figure 3 as was the case in the 
example shown in Figure 2. The time frame in which 
each message is to be transmitted and its message 
identifier priority are determined by the system designer 
after due consideration of the functions being imple- 
mented at each node and the timing thread require- 
ments. The schedule of message transmissions should 
then be set within the transmission scheme by the de- 
signer in order to meet the timing requirements as close- 
ly as possible. 

[0036] Message priorities are then assigned based on 
the position of a message within the message transmis- 
sion cycle. For example, with reference to Figure 4, the 



synchronisation signal is assigned message priority ze- 
ro thereby assuring that it is given the highest priority 
within the transmission scheme. The high pressure 
compressor speed may, for example, be assigned pri- 
5 ority identifier 10, the low pressure compressor speed 
may be assigned priority identifier 20, and so on up to 
identifier 940. 

[0037] Following the synchronisation pulse, one or 
more of the nodes may attempt to transmit the messag- 

10 es having priorities 1 0 to 50. An attempt is made to trans- 
mit these in time frame TO and nodes expecting to re- 
ceive these items of data look for them in time frame T2. 
Should any item of data from time frame zero come into 
contention with an item of data from time frame T1 be- 

15 cause of temporal misalignment between the process- 
ing nodes, the items in time frame TO will have the higher 
transmission priority and consequently their arrival be- 
fore the commencement of time frame T2 (as measured 
using the local clock at any node) will be assured. Thus, 

20 the worst latency that a message may be subjected to 
amounts to onetime frame and consequently its de livery 
can be assured after two time frames. Put another way, 
if two nodes drift such that the Nth time frame at one 
node starts to overlap with the (N+1)th time frame of an- 

25 other node the messages scheduled for the Nth time 
frame will always take priority over those scheduled for 
the (N+1)th time frame and their delivery is assured in 
the (N+2)th time frame. 

[0038] Some parameters may be transmitted more 
30 than once per bus transmission cycle, thus, referring to 
Figure 2, item-1 32 was transmitted in frames TO and T5. 
This still occurs in the arrangement shown in Figure 3, 
but now the messages have different identifiers, namely 
10 and 520. 

35 [0039] As described in GB 2337347, if a node is run- 
ning slower than the timing master node there is a pos- 
sibility that it will receive a synchronisation pulse during 
what it regards as time frame T9. This gives rise to sev- 
eral possibilities. Firstly, messages transmitted in time 

40 frame T7 may be received in time frame T9 by the node 
which acts as the timing master (most likely to core unit 
2), but these messages could be received in frames T9 
or TO by all other nodes. Also, because the receipt of a 
synchronisation pulse by a node which is lagging behind 

45 the timing master may result in the ninth time frame be- 
ing abruptly truncated for that node, then only the timing 
master can transmit in frame T9 as it cannot be guaran- 
teed that other nodes will always have a frame T9. Mes- 
sages in frame T9 may be delayed until frame zero due 

so to the drift of messages from frame T8 into frame T9. 
Frame T9 messages will always be pre-empted by mes- 
sages in all other frames. Therefore the number of mes- 
sages in frame T8 and frame T9 scheduled for transmis- 
sion should be limited thereby giving transmission re- 

55 dundancy towards the end of the transmission cycle. In 
the above example, each frame can support the trans- 
mission of ten messages but frames T8 and T9 only 
have five messages in each frame. Thus any messages 
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delayed in frame T8 into frame T9 can still be transmitted 
in frame T9. Also, any messages in frame T9 which be- 
come delayed due to conflict with a higher priority mes- 
sage from frame 8 will still also be transmitted in frame 
T9. 

[0040] It is thus possible to provide an improved meth- 
od of transmission of data between loosely synchro- 
nised nodes in a multiprocessor distributed data 
processing system. 

[0041] It should also be noted that, by arranging for 
the message identifiers to be assigned such that no two 
messages have priorities which differ by an exact power 
of 2, this ensures that any single bit corruption of a mes- 
sage identifier programmed to be received by the CAN 
interface 18 will not result in a valid identifier for the sys- 
tem. In particular, it will not transform from one valid 
identifier into another valid identifier. This prevents er- 
roneous acceptance of the wrong message if such a sin- 
gle bit corruption occurs. It should be noted that the nor- 
mal CAN error checking will detect corruption of the 
identifier during transmission. This assignment of mes- 
sage identifiers further removes the danger that a CAN 
interface may corrupt to accept the wrong message. 



Claims 

1. A method of transmitting data within a distributed 
data processing system having a plurality of nodes 
(1, 2, 3) interconnected via a data channel (20), 
wherein the data processing system has a data 
transmission cycle subdivided into a plurality of 
transmission periods, each period able to support 
the transmission of a plurality of data transmission 
events, characterised In that a priority is associat- 
ed with each transmission event, the priority being 
determined by the scheduled transmission time of 
the transmission event. 

2. A method as claimed in claim 1 , characterised in 
that each node is allocated at least one transmis- 
sion event in the transmission cycle. 

3. A method as claimed in claim 1 or 2, characterised 
in that, since priorities are assigned on the basis of 
scheduled transmission time, a delayed transmis- 
sion takes priority over all subsequently scheduled 
transmissions. 

4. A method as claimed in any one of the preceding 
claims, characterised in that a synchronisation 
signal is transmitted by one of the nodes (2) and is 
defined as the most significant message within the 
transmission scheme. 

5. A method as claimed in claim 4, characterised in 
that the synchronisation signal is transmitted first 
in any data transmission cycle. 



6. A method as claimed in any one of the preceding 
claims in which any nodes expecting to receive a 
specific item of data scheduled for transmission in 
a Nth transmission period checks for the data in a 

5 (N+2)th transmission period. 

7. A method as claimed in any one of the preceding 
claims, characterised in that the final two trans- 
mission periods of the transmission cycle have few- 

10 er scheduled transmissions allocated to them, such 
that there is sufficient spare transmission capacity 
to transmit any delayed transmissions and the 
scheduled ones within these transmission periods. 

is 8. A method as claimed in any one of the preceding 
claims, in which messages transmitted towards the 
end of the transmission cycle are of lower impor- 
tance than messages scheduled for earlier trans- 
mission. 

20 

9. A method as claimed in claim 4 or any other claim 
based thereon, in which a node (1, 2, 3) receiving 
the synchronisation signal (0) adjusts an internal 
clock (16) to maintain synchronisation. 

25 

10. A method as claimed in any one of the preceding 
claims, in which each node is arranged to attempt 
to transmit data when the scheduled time for the 
transmission of the data is reached. 

30 

11. A method as claimed in any one of the preceding 
claims, characterised in that each node includes 
a communications interface with bus arbitration 
therein such that bus contentions are resolved. 

35 

12. A method as claimed in any one of the preceding 
claims, in which none of the priorities associated 
with the messages differ by an exact power of 2, 
such that corruption of a single bit in the priority 

40 identifier results in an invalid identifier. 

13. A method of transmitting data within a distributed 
data processing system having a plurality of nodes 
(1 , 2, 3) connected via a data pathway (20), wherein 

45 the nodes are substantially synchronised to a refer- 
ence and at least one node attempts to transmit a 
predetermined item of data at a scheduled trans- 
mission time, as measured locally within a node, fol- 
lowing the reference, and wherein each item of data 

so is associated with a unique priority identifier, with 
the priority identifier indicating that the transmission 
priority of a message reduces as the scheduled 
transmission time of the message increases, and 
wherein nodes (1 , 2, 3) expecting to receive a par- . 

55 ticular message check for its receipt within a receipt 
window following the scheduled transmission of the 
message. 
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14. A distributed data processing system having a plu- 
rality of nodes (1 , 2, 3) interconnected via a data 
channel (20), wherein the data processing system 
has a data transmission cycle subdivided into a plu- 
rality of transmission periods (TO, T1 , ... T9), each 5 
period able to support the transmission of a plurality 

of transmission events, and at least one node is al- 
located at least one transmission event in at least 
one of the transmission periods (TO, T1 , ... T9), and 
a priority is associated with each transmission 10 
event, the priority being determined by the sched- 
uled transmission time of the transmission event. 

15. A distributed data processing system as claimed in 
claim 14, characterised in that each node trans- 15 
mits its data when the scheduled transmission time 

for the data, as determined by a timer (16) within 
the node, arrives; and each node further includes a 
bus interface (18) which resolves bus contentions 
based on message priority. 20 

16. A distributed data processing system as claimed in 
claim 14 or 15, characterised in that a delayed 
transmission takes precedence over all subse- 
quently scheduled transmission events within a 25 
transmission cycle. 

17. A distributed data processing system as claimed in 
any one of claims 1 4 to 1 6, in which one of the nodes 

(1 , 2, 3) is responsible for periodically generating a 30 
timing reference signal, to which other nodes are 
synchronised. 

18. A data transmission system having a plurality of 
nodes connected via a data pathway, wherein the 35 
nodes are substantially synchronised to a reference 
and at least one node attempts to transmit a prede- 
termined item of data at a scheduled transmission 
time as measured locally within a node following the 
reference; and wherein each item of data is associ- *o 
ated with a unique priority identifier, with the priority 
identifier indicating that the priority of a message re- 
duces as the scheduled transmission time of a mes- 
sage within the transmission cycle increases. 
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Fig. 1 
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Fig. 4 
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